Privacy Policy — MDVault

MDVault ("we", "us", or "our") operates the MDVault platform, a digital marketplace for medical study notes. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

Mobile number. When you sign in, we collect your Indian mobile number to verify your identity via OTP. This is the only personally identifiable information we require to create an account.

Purchase records. When you make a payment, we record the asset purchased, the amount paid, and the Razorpay order and payment IDs. We do not store any card or UPI credentials — all payment processing is handled by Razorpay.

Usage data. We may log request metadata (IP address, browser, pages viewed) for security and debugging purposes. This data is not sold or shared with third parties.

2. How We Use Your Information

To authenticate your account via OTP
To process and fulfil your purchases
To display your purchase history
To embed a watermark (your phone number) on purchased pages to deter piracy
To detect and prevent fraudulent or abusive activity
To send transactional messages (OTP, payment confirmation) via SMS

We do not use your information for advertising or sell it to any third party.

3. Third-Party Services

Razorpay processes all payments. Your payment details are governed by Razorpay's Privacy Policy.

MSG91 delivers OTP messages to your mobile number. Message delivery is subject to MSG91's terms.

4. Data Retention

We retain your account and purchase data for as long as your account is active or as required by law. OTPs are stored temporarily (10 minutes) and deleted after use. You may request deletion of your account by contacting us at support@mdvault.in.

5. Security

We use industry-standard measures including HTTPS, hashed OTPs, and signed JWT sessions to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Children's Privacy

MDVault is intended for medical students and professionals aged 18 and above. We do not knowingly collect information from anyone under 18.

7. Changes to This Policy

We may update this policy from time to time. Continued use of the platform after changes constitutes acceptance of the updated policy.

8. Contact

For privacy-related queries, contact us at support@mdvault.in.